CVE-2026-22738: In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could…

PriorityP262critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.82%

52.6th percentile

In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
spring	spring_ai	>= 1.0.0 < 1.0.5	1.0.5
spring	spring_ai	>= 1.1.0 < 1.1.4	1.1.4
vmware	spring_ai	>= 1.0.0 < 1.0.5	1.0.5
vmware	spring_ai	>= 1.1.0 < 1.1.4	1.1.4

Detection & IOCsextracted from sources · hover to see the quote

→Vulnerability exists in SimpleVectorStore when user-supplied input is passed as a filter expression key, triggering SpEL (Spring Expression Language) injection leading to arbitrary code execution. ↗
→Scope detection to applications using the Maven artifact org.springframework.ai:spring-ai-vector-store — only this component is affected. ↗
→Only applications that use SimpleVectorStore AND pass user-supplied input as a filter expression key are in scope; triage should focus on data flows where external input reaches filter expression key parameters. ↗

·Affected Spring AI version ranges are 1.0.0 up to (not including) 1.0.5, and 1.1.0 up to (not including) 1.1.4. Detection/blocking rules should account for both branches. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.